SI Readiness by MCP-Tool
Bot identity and content signals
Can you tell a legitimate agent from an impostor, and have you stated your terms?
Why it matters
Once agents transact, user-agent strings stop being good enough — anyone can claim to be one. Signed requests let you welcome the real ones, and content signals let you state what your text may be used for without blocking it outright.
How to fix it
Publish a Web Bot Auth signature directory, and express usage terms with content signals in robots.txt rather than a blanket disallow.